Do you think a hardware cutoff switch for the camera, like the Librem 5 and PinePhone, is enough to ensure privacy, or would you really want an actual built-in camera cover like is on some laptops (that presumably also kills the power since the system knows whether the camera is covered). The caveat for only having a switch being that you can’t very easily audit the circuitry to check if it’s actually turning off the camera, but the benefit being that it’s easier to implement, has fewer points of failure, and will leave more room for a bigger camera.

Also, would you want separate switches for front and rear facing cameras or are you okay with turning both of them on and off with one switch?

  • ganymede
    link
    fedilink
    arrow-up
    11
    ·
    4 years ago

    Ideally you would want both.

    1. For anything important, redundancy is important.

    2. Most covers can still leak some information with various integration time settings.

    3. Killswitches need to be trusted, and cannot easily be verifiable at a glance.

    4. Killswitches circuitry should place the mechanically isolated switch in series to the camera power line, and on the camera side have an indicator LED in parallel - or a similar arrangement. Other configurations are difficult to trust.

    Imo separate switches is not as important as verifiably trusted switches. Separate would be nice, as long as it doesn’t lead to confusion.

    • AgreeableLandscapeOP
      link
      fedilink
      arrow-up
      5
      ·
      edit-2
      4 years ago

      That begs the question of how one would check if the cutoff switch is working. If a company like Pine64 or Purism says they have cutoff switches in series to the power, would you trust them? What if the devices were audited by a third party? I wonder if there’s a self-test that can determine if they’re working, which you can run from in the OS itself.

      Even if the camera had a cover you can see, that’s not possible for the microphone, radios, etc. Do you think the other components can get away with not having physical indicators of function? Do you consider them significantly less privacy invading than a camera? I mean, in terms of “creep factor,” then yeah, the camera is by far the worst, but if your main concern is confidential information leakage, like if it’s a work computer, the microphone can be just as bad, possibly worse.

      I guess you can take the thing apart and follow the traces from the switch to the camera, but I feel like that’s edging on paranoid, unless you’re like a secret agent or something where someone modifying your specific device before shipping to you is part of your threat model.

    • AgreeableLandscapeOP
      link
      fedilink
      arrow-up
      3
      ·
      4 years ago

      Do you usually turn off the mic and cameras at the same time? I think I’d prefer if they were two separate killswitches.

        • AgreeableLandscapeOP
          link
          fedilink
          arrow-up
          1
          ·
          4 years ago

          It would be cool if the kill switch could signal the phone to accept the call or something, but realistically I don’t think that’s ever going to happen of course.

          That’s actually completely doable even if we’re working with the stipulation that power cut off, not just a signal to not use the camera, because you can just wire transistors up to the switch output. A transistor detects the switch output and turns the power on or off accordingly, while the switch output goes on to inform the processor what the state is. No processing needed that could introduce errors into the power cutoff system.

  • Axaoe
    link
    fedilink
    arrow-up
    3
    ·
    edit-2
    4 years ago

    I think I could do without a camera altogether so Im OK with a switch handling both (I used the OnePlus 7 Pro for awhile, popup selfish camera that was never used for the win).

    I’d honestly just be happy with options that are native and not like a case that offers camera blocks, adding your own etc.

    I don’t know what would be best for me, but I havent had devices that offer this minus the PinePhone - and I couldnt use that for my everyday tasks so don’t feel it counts (I also just kept the camera switched off so I didnt cause the OS to freeze/crash with some of the earlier builds).

    • Kamui
      link
      fedilink
      arrow-up
      2
      ·
      4 years ago

      Omg yes me too. There’s just cameras on eeeeeverything when I don’t even use it.